Confine iio-sensor-proxy

fedora-selinux · Oct 2, 2024 · 2f4be79 · 2f4be79
1 parent 04bacae
commit 2f4be79
Show file tree

Hide file tree

Showing 4 changed files with 22 additions and 0 deletions.
diff --git a/dist/targeted/modules.conf b/dist/targeted/modules.conf
@@ -3084,3 +3084,10 @@ sap = module
 # Policy for systemd-homed
 #
 systemd-homed = module
+
+# Layer: contrib
+# Module: iiosensorproxy
+#
+# Policy for iio-sensor-proxy - IIO sensors to D-Bus proxy
+#
+iiosensorproxy = module
diff --git a/policy/modules/contrib/iiosensorproxy.fc b/policy/modules/contrib/iiosensorproxy.fc
@@ -0,0 +1 @@
+/usr/libexec/iio-sensor-proxy	--	gen_context(system_u:object_r:iiosensorproxy_exec_t,s0)
diff --git a/policy/modules/contrib/iiosensorproxy.if b/policy/modules/contrib/iiosensorproxy.if
@@ -0,0 +1,2 @@
+## <summary>IIO sensors to D-Bus proxy</summary>
+
diff --git a/policy/modules/contrib/iiosensorproxy.te b/policy/modules/contrib/iiosensorproxy.te
@@ -0,0 +1,12 @@
+policy_module(iiosensorproxy, 1.1.0)
+
+########################################
+#
+# Declarations
+#
+
+type iiosensorproxy_t;
+type iiosensorproxy_exec_t;
+init_daemon_domain(iiosensorproxy_t, iiosensorproxy_exec_t)
+
+permissive iiosensorproxy_t;